[people/pmueller/ipfire-2.x.git] / lfs / suricata

###############################################################################
#                                                                             #
# IPFire.org - A linux based firewall                                         #
# Copyright (C) 2007-2021  IPFire Team  <info@ipfire.org>                     #
#                                                                             #
# This program is free software: you can redistribute it and/or modify        #
# it under the terms of the GNU General Public License as published by        #
# the Free Software Foundation, either version 3 of the License, or           #
# (at your option) any later version.                                         #
#                                                                             #
# This program is distributed in the hope that it will be useful,             #
# but WITHOUT ANY WARRANTY; without even the implied warranty of              #
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the               #
# GNU General Public License for more details.                                #
#                                                                             #
# You should have received a copy of the GNU General Public License           #
# along with this program.  If not, see <http://www.gnu.org/licenses/>.       #
#                                                                             #
###############################################################################

###############################################################################
# Definitions
###############################################################################

include Config

VER        = 5.0.8

THISAPP    = suricata-$(VER)
DL_FILE    = $(THISAPP).tar.gz
DL_FROM    = $(URL_IPFIRE)
DIR_APP    = $(DIR_SRC)/$(THISAPP)
TARGET     = $(DIR_INFO)/$(THISAPP)

###############################################################################
# Top-level Rules
###############################################################################

objects = $(DL_FILE)

$(DL_FILE) = $(DL_FROM)/$(DL_FILE)

$(DL_FILE)_MD5 = d48387c2e0b5e502852b077369d947c5

install : $(TARGET)

check : $(patsubst %,$(DIR_CHK)/%,$(objects))

download :$(patsubst %,$(DIR_DL)/%,$(objects))

md5 : $(subst %,%_MD5,$(objects))

###############################################################################
# Downloading, checking, md5sum
###############################################################################

$(patsubst %,$(DIR_CHK)/%,$(objects)) :
	@$(CHECK)

$(patsubst %,$(DIR_DL)/%,$(objects)) :
	@$(LOAD)

$(subst %,%_MD5,$(objects)) :
	@$(MD5)

###############################################################################
# Installation Details
###############################################################################

$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
	@$(PREBUILD)
	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/suricata-5.0-stream-tcp-Handle-retransmitted-SYN-with-TSval.patch
	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/suricata-disable-sid-2210059.patch
	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/suricata-5.0.8-fix-level1-cache-line-size-detection.patch
	cd $(DIR_APP) && LDFLAGS="$(LDFLAGS)" ./configure \
		--prefix=/usr \
		--sysconfdir=/etc \
		--localstatedir=/var \
		--enable-gccprotect \
		--disable-gccmarch-native \
		--enable-non-bundled-htp \
		--enable-nfqueue \
		--disable-static \
		--disable-python \
		--with-libjansson-libraries=/usr/lib \
		--with-libjansson-includes=/usr/include \
		--disable-suricata-update \
		--enable-rust

	cd $(DIR_APP) && make $(MAKETUNING)
	cd $(DIR_APP) && make install
	cd $(DIR_APP) && make install-conf

	# Remove default suricata config file.
	rm -rvf /etc/suricata/suricata.yaml

	# Install IPFire related config file.
	install -m 0644 $(DIR_SRC)/config/suricata/suricata.yaml /etc/suricata

	# Create emtpy rules directory.
	-mkdir -p /var/lib/suricata

	# Move config files for references, threshold and classification
	# to the rules directory.
	rm -rfv /etc/suricata/*.config

	# Set correct ownership for the classifiction config file.
	# (File has to be writeable for the nobody user)
	chown nobody:nobody /usr/share/suricata/classification.config

	# Set correct ownership for /var/lib/suricata and the
	# contained files
	chown -R nobody:nobody /var/lib/suricata

	# Create logging directory.
	-mkdir -p /var/log/suricata

	# Set correct ownership for /var/log/suricata.
	chown suricata:suricata /var/log/suricata

	@rm -rf $(DIR_APP)
	@$(POSTBUILD)
Commit	Line	Data
67752a95 SS	1	###############################################################################
	2	# #
	3	# IPFire.org - A linux based firewall #
a9285618	4	# Copyright (C) 2007-2021 IPFire Team <info@ipfire.org> #
67752a95 SS	5	# #
	6	# This program is free software: you can redistribute it and/or modify #
	7	# it under the terms of the GNU General Public License as published by #
	8	# the Free Software Foundation, either version 3 of the License, or #
	9	# (at your option) any later version. #
	10	# #
	11	# This program is distributed in the hope that it will be useful, #
	12	# but WITHOUT ANY WARRANTY; without even the implied warranty of #
	13	# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the #
	14	# GNU General Public License for more details. #
	15	# #
	16	# You should have received a copy of the GNU General Public License #
	17	# along with this program. If not, see <http://www.gnu.org/licenses/>. #
	18	# #
	19	###############################################################################
	20
	21	###############################################################################
	22	# Definitions
	23	###############################################################################
	24
	25	include Config
	26
58d39971	27	VER = 5.0.8
67752a95 SS	28
	29	THISAPP = suricata-$(VER)
	30	DL_FILE = $(THISAPP).tar.gz
	31	DL_FROM = $(URL_IPFIRE)
	32	DIR_APP = $(DIR_SRC)/$(THISAPP)
	33	TARGET = $(DIR_INFO)/$(THISAPP)
aa81aaf8	34
67752a95 SS	35	###############################################################################
	36	# Top-level Rules
	37	###############################################################################
	38
	39	objects = $(DL_FILE)
	40
	41	$(DL_FILE) = $(DL_FROM)/$(DL_FILE)
	42
58d39971	43	$(DL_FILE)_MD5 = d48387c2e0b5e502852b077369d947c5
67752a95 SS	44
	45	install : $(TARGET)
	46
	47	check : $(patsubst %,$(DIR_CHK)/%,$(objects))
	48
	49	download :$(patsubst %,$(DIR_DL)/%,$(objects))
	50
	51	md5 : $(subst %,%_MD5,$(objects))
	52
	53	###############################################################################
	54	# Downloading, checking, md5sum
	55	###############################################################################
	56
	57	$(patsubst %,$(DIR_CHK)/%,$(objects)) :
	58	@$(CHECK)
	59
	60	$(patsubst %,$(DIR_DL)/%,$(objects)) :
	61	@$(LOAD)
	62
	63	$(subst %,%_MD5,$(objects)) :
	64	@$(MD5)
	65
	66	###############################################################################
	67	# Installation Details
	68	###############################################################################
	69
	70	$(TARGET) : $(patsubst %,$(DIR_DL)/%,$(objects))
	71	@$(PREBUILD)
	72	@rm -rf $(DIR_APP) && cd $(DIR_SRC) && tar zxf $(DIR_DL)/$(DL_FILE)
73d18835	73	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/suricata-5.0-stream-tcp-Handle-retransmitted-SYN-with-TSval.patch
65d5ec52	74	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/suricata-disable-sid-2210059.patch
a7834bcf	75	cd $(DIR_APP) && patch -Np1 < $(DIR_SRC)/src/patches/suricata-5.0.8-fix-level1-cache-line-size-detection.patch
66970ccb	76	cd $(DIR_APP) && LDFLAGS="$(LDFLAGS)" ./configure \
67752a95 SS	77	--prefix=/usr \
	78	--sysconfdir=/etc \
	79	--localstatedir=/var \
	80	--enable-gccprotect \
	81	--disable-gccmarch-native \
	82	--enable-non-bundled-htp \
	83	--enable-nfqueue \
e8b1b397 SS	84	--disable-static \
e8b1b397 SS	85	--disable-python \
21a83823 EK	86	--with-libjansson-libraries=/usr/lib \
21a83823 EK	87	--with-libjansson-includes=/usr/include \
1a65ea1b SS	88	--disable-suricata-update \
	89	--enable-rust
	90
67752a95 SS	91	cd $(DIR_APP) && make $(MAKETUNING)
	92	cd $(DIR_APP) && make install
	93	cd $(DIR_APP) && make install-conf
d2e6bf6e SS	94
	95	# Remove default suricata config file.
	96	rm -rvf /etc/suricata/suricata.yaml
	97
	98	# Install IPFire related config file.
4c6d6c1e	99	install -m 0644 $(DIR_SRC)/config/suricata/suricata.yaml /etc/suricata
21cab141 SS	100
	101	# Create emtpy rules directory.
	102	-mkdir -p /var/lib/suricata
	103
	104	# Move config files for references, threshold and classification
	105	# to the rules directory.
5a3e97b8	106	rm -rfv /etc/suricata/*.config
728f3d2e	107
9e9d89ae SS	108	# Set correct ownership for the classifiction config file.
	109	# (File has to be writeable for the nobody user)
	110	chown nobody:nobody /usr/share/suricata/classification.config
	111
728f3d2e SS	112	# Set correct ownership for /var/lib/suricata and the
	113	# contained files
	114	chown -R nobody:nobody /var/lib/suricata
89a12b38	115
21cab141	116	# Create logging directory.
67752a95	117	-mkdir -p /var/log/suricata
21cab141	118
f717b1dc SS	119	# Set correct ownership for /var/log/suricata.
	120	chown suricata:suricata /var/log/suricata
	121
67752a95 SS	122	@rm -rf $(DIR_APP)
67752a95 SS	123	@$(POSTBUILD)